@pensar/apex 1.6.0 → 1.7.0-canary.fc156bd3

package/build/{agent-nnj9t74r.js → agent-059z1wta.js}

@@ -3,21 +3,21 @@ import {
 } from "./cli-0fy9j5dw.js";
 import {
   OffensiveSecurityAgent
-} from "./cli-e06s4dbt.js";
+} from "./cli-eppqn21m.js";
 import"./cli-tp1tqn3k.js";
-import"./cli-fhm4gfky.js";
+import"./cli-q4k54esg.js";
 import"./cli-3y0dgy56.js";
 import {
   hasToolCall
-} from "./cli-2gz62eh7.js";
+} from "./cli-dask2vk7.js";
 import {
   tool
 } from "./cli-0ghkg3w6.js";
-import"./cli-3462esbc.js";
-import"./cli-m45bmsc5.js";
+import"./cli-b24ad6fn.js";
+import"./cli-s0szpfg0.js";
 import"./cli-gpnb45ck.js";
-import"./cli-j54wb0q5.js";
-import"./cli-4bvafx3k.js";
+import"./cli-gddjk082.js";
+import"./cli-k98mffkk.js";
 import"./cli-03z6pswp.js";
 import"./cli-8rxa073f.js";
 

package/build/agent-3j42hsvn.js

@@ -0,0 +1,19 @@
+import {
+  CodeAgent
+} from "./cli-7sfmck9y.js";
+import"./cli-eppqn21m.js";
+import"./cli-tp1tqn3k.js";
+import"./cli-q4k54esg.js";
+import"./cli-3y0dgy56.js";
+import"./cli-dask2vk7.js";
+import"./cli-0ghkg3w6.js";
+import"./cli-b24ad6fn.js";
+import"./cli-s0szpfg0.js";
+import"./cli-gpnb45ck.js";
+import"./cli-gddjk082.js";
+import"./cli-k98mffkk.js";
+import"./cli-03z6pswp.js";
+import"./cli-8rxa073f.js";
+export {
+  CodeAgent
+};

package/build/{auth-hhzeb7wq.js → auth-15hfam2s.js}

@@ -8,14 +8,14 @@ import {
   pollWorkOSToken,
   selectWorkspace,
   startDeviceFlow
-} from "./cli-3462esbc.js";
+} from "./cli-b24ad6fn.js";
 import {
   config,
   getPensarApiUrl,
   getPensarConsoleUrl
-} from "./cli-m45bmsc5.js";
-import"./cli-j54wb0q5.js";
-import"./cli-4bvafx3k.js";
+} from "./cli-s0szpfg0.js";
+import"./cli-gddjk082.js";
+import"./cli-k98mffkk.js";
 import {
   __require
 } from "./cli-8rxa073f.js";

package/build/{authentication-696jn3en.js → authentication-d1qs1g9m.js}

@@ -1,20 +1,20 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-e06s4dbt.js";
+} from "./cli-eppqn21m.js";
 import {
   detectOSAndEnhancePrompt
 } from "./cli-tp1tqn3k.js";
-import"./cli-fhm4gfky.js";
+import"./cli-q4k54esg.js";
 import"./cli-3y0dgy56.js";
 import {
   hasToolCall
-} from "./cli-2gz62eh7.js";
+} from "./cli-dask2vk7.js";
 import"./cli-0ghkg3w6.js";
-import"./cli-3462esbc.js";
-import"./cli-m45bmsc5.js";
+import"./cli-b24ad6fn.js";
+import"./cli-s0szpfg0.js";
 import"./cli-gpnb45ck.js";
-import"./cli-j54wb0q5.js";
-import"./cli-4bvafx3k.js";
+import"./cli-gddjk082.js";
+import"./cli-k98mffkk.js";
 import"./cli-03z6pswp.js";
 import"./cli-8rxa073f.js";
 

package/build/{blackboxAgent-nxvgqsw3.js → blackboxAgent-qf9gtdz3.js}

@@ -1,17 +1,17 @@
 import {
   BlackboxAttackSurfaceAgent
-} from "./cli-x1g2s9n9.js";
-import"./cli-e06s4dbt.js";
+} from "./cli-5htwcgkj.js";
+import"./cli-eppqn21m.js";
 import"./cli-tp1tqn3k.js";
-import"./cli-fhm4gfky.js";
+import"./cli-q4k54esg.js";
 import"./cli-3y0dgy56.js";
-import"./cli-2gz62eh7.js";
+import"./cli-dask2vk7.js";
 import"./cli-0ghkg3w6.js";
-import"./cli-3462esbc.js";
-import"./cli-m45bmsc5.js";
+import"./cli-b24ad6fn.js";
+import"./cli-s0szpfg0.js";
 import"./cli-gpnb45ck.js";
-import"./cli-j54wb0q5.js";
-import"./cli-4bvafx3k.js";
+import"./cli-gddjk082.js";
+import"./cli-k98mffkk.js";
 import"./cli-03z6pswp.js";
 import"./cli-8rxa073f.js";
 export {

package/build/{blackboxPentest-x1eynyy6.js → blackboxPentest-skcta0kn.js}

@@ -1,23 +1,23 @@
 import {
   runPentestWorkflow
-} from "./cli-nhqvhgdk.js";
-import"./cli-ww2x78tc.js";
-import"./cli-m69x66eh.js";
+} from "./cli-pcwh8avj.js";
+import"./cli-m1368s8r.js";
+import"./cli-agnn8r68.js";
 import"./cli-0fy9j5dw.js";
-import"./cli-x1g2s9n9.js";
+import"./cli-5htwcgkj.js";
 import"./cli-fw5r7pfj.js";
-import"./cli-6w784800.js";
-import"./cli-e06s4dbt.js";
+import"./cli-7sfmck9y.js";
+import"./cli-eppqn21m.js";
 import"./cli-tp1tqn3k.js";
-import"./cli-fhm4gfky.js";
+import"./cli-q4k54esg.js";
 import"./cli-3y0dgy56.js";
-import"./cli-2gz62eh7.js";
+import"./cli-dask2vk7.js";
 import"./cli-0ghkg3w6.js";
-import"./cli-3462esbc.js";
-import"./cli-m45bmsc5.js";
+import"./cli-b24ad6fn.js";
+import"./cli-s0szpfg0.js";
 import"./cli-gpnb45ck.js";
-import"./cli-j54wb0q5.js";
-import"./cli-4bvafx3k.js";
+import"./cli-gddjk082.js";
+import"./cli-k98mffkk.js";
 import"./cli-03z6pswp.js";
 import"./cli-8rxa073f.js";
 

package/build/{cli-x1g2s9n9.js → cli-5htwcgkj.js}

@@ -1,13 +1,13 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-e06s4dbt.js";
+} from "./cli-eppqn21m.js";
 import {
   detectOSAndEnhancePrompt
 } from "./cli-tp1tqn3k.js";
 import {
   hasToolCall,
   stepCountIs
-} from "./cli-2gz62eh7.js";
+} from "./cli-dask2vk7.js";
 
 // src/core/agents/specialized/attackSurface/blackboxAgent.ts
 import { join } from "path";

package/build/{cli-2aj6efy7.js → cli-7ay2tay9.js}

@@ -1,6 +1,6 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-e06s4dbt.js";
+} from "./cli-eppqn21m.js";
 import {
   __commonJS,
   __require

package/build/{cli-6w784800.js → cli-7sfmck9y.js}

@@ -1,9 +1,9 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-e06s4dbt.js";
+} from "./cli-eppqn21m.js";
 import {
   stepCountIs
-} from "./cli-2gz62eh7.js";
+} from "./cli-dask2vk7.js";
 
 // src/core/agents/specialized/codeAgent/prompts.ts
 var CODE_AGENT_SYSTEM_PROMPT = `You are an expert coding agent with direct filesystem access. You will be given a specific objective — focus exclusively on completing it.

package/build/{cli-m69x66eh.js → cli-agnn8r68.js}

@@ -1,7 +1,7 @@
 import {
   OffensiveSecurityAgent,
   readPlan
-} from "./cli-e06s4dbt.js";
+} from "./cli-eppqn21m.js";
 import {
   exports_external1 as exports_external,
   init_zod

package/build/{cli-3462esbc.js → cli-b24ad6fn.js}

@@ -3,7 +3,7 @@ import {
   ensureValidToken,
   getPensarApiUrl,
   getPensarGatewayUrl
-} from "./cli-m45bmsc5.js";
+} from "./cli-s0szpfg0.js";
 
 // src/core/auth/signing.ts
 import { createHmac, createHash, randomUUID } from "crypto";

package/build/{cli-2gz62eh7.js → cli-dask2vk7.js}

@@ -71,12 +71,12 @@ import {
 } from "./cli-0ghkg3w6.js";
 import {
   signGatewayRequest
-} from "./cli-3462esbc.js";
+} from "./cli-b24ad6fn.js";
 import {
   config,
   ensureValidToken,
   getPensarGatewayUrl
-} from "./cli-m45bmsc5.js";
+} from "./cli-s0szpfg0.js";
 import {
   getModelInfo,
   init_models

package/build/{cli-e06s4dbt.js → cli-eppqn21m.js}

@@ -16,7 +16,7 @@ import {
   update,
   write,
   writeRaw
-} from "./cli-fhm4gfky.js";
+} from "./cli-q4k54esg.js";
 import {
   parseTargetUrl
 } from "./cli-3y0dgy56.js";
@@ -29,7 +29,7 @@ import {
   require_tslib,
   streamResponse,
   toggleTool
-} from "./cli-2gz62eh7.js";
+} from "./cli-dask2vk7.js";
 import {
   _enum,
   _null,
@@ -57,15 +57,15 @@ import {
 } from "./cli-0ghkg3w6.js";
 import {
   signGatewayRequest
-} from "./cli-3462esbc.js";
+} from "./cli-b24ad6fn.js";
 import {
   config,
   ensureValidToken,
   getPensarApiUrl
-} from "./cli-m45bmsc5.js";
+} from "./cli-s0szpfg0.js";
 import {
   getCurrentVersion
-} from "./cli-4bvafx3k.js";
+} from "./cli-k98mffkk.js";
 import {
   __commonJS,
   __require,
@@ -119360,7 +119360,7 @@ async function generateThreatModelForEndpoint(ctx, input) {
   return threatModelLimiter(async () => {
     if (ctx.abortSignal?.aborted)
       return null;
-    const { CodeAgent } = await import("./agent-xyps79pq.js");
+    const { CodeAgent } = await import("./agent-3j42hsvn.js");
     const subagentId = `threat-model-${sanitize(input.appName)}-${sanitize(input.routePath)}`;
     ctx.eventBus?.emit("subagent-spawn", {
       subagentId,
@@ -120049,7 +120049,7 @@ When to use delegate_to_auth_subagent vs authenticate_session:
         if (credentials) {
           ctx.session.credentialManager.addFromAuthCredentials(credentials);
         }
-        const { runAuthenticationAgent } = await import("./authentication-696jn3en.js");
+        const { runAuthenticationAgent } = await import("./authentication-d1qs1g9m.js");
         const localBus = new AgentEventBus;
         AgentEventBus.attachChild(localBus, ctx.eventBus, subagentId);
         const result = await runAuthenticationAgent({
@@ -120962,7 +120962,7 @@ should be passed directly to spawn_pentest_swarm for deep testing.`,
       });
       if (cwd) {
         try {
-          const { WhiteboxAttackSurfaceAgent } = await import("./agent-nnj9t74r.js");
+          const { WhiteboxAttackSurfaceAgent } = await import("./agent-059z1wta.js");
           const localBus = new AgentEventBus;
           AgentEventBus.attachChild(localBus, ctx.eventBus, subagentId);
           const agent = new WhiteboxAttackSurfaceAgent({
@@ -121011,7 +121011,7 @@ should be passed directly to spawn_pentest_swarm for deep testing.`,
         }
       }
       try {
-        const { BlackboxAttackSurfaceAgent } = await import("./blackboxAgent-nxvgqsw3.js");
+        const { BlackboxAttackSurfaceAgent } = await import("./blackboxAgent-qf9gtdz3.js");
         const localBus = new AgentEventBus;
         AgentEventBus.attachChild(localBus, ctx.eventBus, subagentId);
         const agent = new BlackboxAttackSurfaceAgent({
@@ -121087,7 +121087,7 @@ Pass every target you want tested — the swarm handles concurrency automaticall
       toolCallDescription: exports_external.string().describe("A concise, human-readable description of what this tool call is doing")
     }),
     execute: async ({ targets }) => {
-      const { runPentestSwarm, DEFAULT_CONCURRENCY } = await import("./pentest-gtn28jcf.js");
+      const { runPentestSwarm, DEFAULT_CONCURRENCY } = await import("./pentest-r9k07h8z.js");
       if (!ctx.model) {
         return {
           success: false,
@@ -121215,7 +121215,7 @@ Returns an array of results with the text output from each agent.`,
   });
 }
 async function runSingleCodingAgent(ctx, codebasePath, objective, agentIndex, name) {
-  const { CodeAgent } = await import("./agent-xyps79pq.js");
+  const { CodeAgent } = await import("./agent-3j42hsvn.js");
   const subagentId = `coding-agent-${agentIndex}`;
   ctx.eventBus?.emit("subagent-spawn", {
     subagentId,
@@ -121276,7 +121276,7 @@ Omit \`cwd\` for blackbox mode (live target probing only).`,
       toolCallDescription: exports_external.string().describe("A concise, human-readable description of what this tool call is doing")
     }),
     execute: async ({ target, cwd }) => {
-      const { runPentestWorkflow: workflow } = await import("./pentest-gtn28jcf.js");
+      const { runPentestWorkflow: workflow } = await import("./pentest-r9k07h8z.js");
       if (!ctx.model) {
         return {
           success: false,
@@ -124811,6 +124811,49 @@ var webSearchInputSchema = exports_external.object({
   query: exports_external.string().describe("The search query to look up. Be specific and include relevant keywords for better results."),
   toolCallDescription: exports_external.string().describe("A concise, human-readable description of what this tool call is doing (e.g., 'Searching for CVE-2024-1234 details')")
 });
+var BRAVE_SEARCH_URL = "https://api.search.brave.com/res/v1/web/search";
+async function braveSearch(query, apiKey) {
+  const url = new URL(BRAVE_SEARCH_URL);
+  url.searchParams.set("q", query);
+  url.searchParams.set("count", "10");
+  const response = await fetch(url.toString(), {
+    method: "GET",
+    headers: {
+      Accept: "application/json",
+      "Accept-Encoding": "gzip",
+      "X-Subscription-Token": apiKey
+    }
+  });
+  if (!response.ok) {
+    if (response.status === 401 || response.status === 403) {
+      return {
+        success: false,
+        results: [],
+        error: "Brave API authentication failed. Check that your brave_api_key is valid."
+      };
+    }
+    if (response.status === 429) {
+      return {
+        success: false,
+        results: [],
+        error: "Brave API rate limit exceeded. Please wait a moment before searching again."
+      };
+    }
+    const errorText = await response.text().catch(() => "Unknown error");
+    return {
+      success: false,
+      results: [],
+      error: `Brave search failed: ${response.status} ${response.statusText}. ${errorText}`
+    };
+  }
+  const data = await response.json();
+  const results = data.web?.results?.map((r) => ({
+    title: r.title ?? "",
+    url: r.url ?? "",
+    snippet: r.description ?? ""
+  })) ?? [];
+  return { success: true, results };
+}
 function webSearch(_ctx) {
   return tool({
     description: `Search the web for real-time information about any topic. Returns summarized information from search results.
@@ -124822,7 +124865,7 @@ USAGE GUIDANCE:
 - Find documentation for tools, APIs, and security testing techniques
 - Look up default credentials, common misconfigurations, and hardening guides
 
-IMPORTANT: This tool requires a Pensar account. If you're not signed in, you'll receive an error message with instructions to sign in.
+IMPORTANT: This tool requires either a Pensar account or a Brave API key. If neither is configured, you'll receive an error message with instructions.
 
 COMMON SEARCH PATTERNS:
 - "CVE-2024-XXXX exploit" — Find details about specific CVEs
@@ -124834,6 +124877,9 @@ COMMON SEARCH PATTERNS:
     execute: async ({ query }) => {
       try {
         const cfg = await config.get();
+        if (cfg.braveAPIKey) {
+          return braveSearch(query, cfg.braveAPIKey);
+        }
         const apiUrl = getPensarApiUrl();
         const body = JSON.stringify({ query });
         if (cfg.pensarAPIKey && !cfg.accessToken) {
@@ -124856,7 +124902,7 @@ COMMON SEARCH PATTERNS:
           return {
             success: false,
             results: [],
-            error: "Web search requires a Pensar account. Please sign in to your Pensar account to use this feature. You can sign in via the TUI settings or by running 'pensar login'."
+            error: "Web search requires a Pensar account or a Brave API key. Please sign in to your Pensar account or configure a Brave API key (set BRAVE_API_KEY or brave_api_key in config)."
           };
         }
         if (!cfg.workspaceId) {

package/build/{cli-j54wb0q5.js → cli-gddjk082.js}

@@ -1,6 +1,6 @@
 import {
   getCurrentVersion
-} from "./cli-4bvafx3k.js";
+} from "./cli-k98mffkk.js";
 
 // src/core/config/config.ts
 import os from "os";
@@ -38,7 +38,8 @@ function applyEnvFallbacks(parsedConfig) {
     pensarAPIKey: parsedConfig.pensarAPIKey ?? process.env.PENSAR_API_KEY,
     daytonaAPIKey: parsedConfig.daytonaAPIKey ?? process.env.DAYTONA_API_KEY,
     daytonaOrgId: parsedConfig.daytonaOrgId ?? process.env.DAYTONA_ORG_ID,
-    runloopAPIKey: parsedConfig.runloopAPIKey ?? process.env.RUNLOOP_API_KEY
+    runloopAPIKey: parsedConfig.runloopAPIKey ?? process.env.RUNLOOP_API_KEY,
+    braveAPIKey: parsedConfig.braveAPIKey ?? process.env.BRAVE_API_KEY
   };
 }
 async function get() {

package/build/{cli-4bvafx3k.js → cli-k98mffkk.js}

@@ -3,7 +3,7 @@ import { spawnSync } from "child_process";
 // package.json
 var package_default = {
   name: "@pensar/apex",
-  version: "1.6.0",
+  version: "1.7.0-canary.fc156bd3",
   description: "AI-powered penetration testing CLI tool with terminal UI",
   module: "src/tui/index.tsx",
   main: "build/cli.js",

package/build/{cli-ww2x78tc.js → cli-m1368s8r.js}

@@ -2,7 +2,7 @@ import {
   CweEntrySchema,
   ValidatedCweEntrySchema,
   hasCanonicalName
-} from "./cli-e06s4dbt.js";
+} from "./cli-eppqn21m.js";
 import {
   exports_external1 as exports_external,
   init_zod

package/build/{cli-ys0ahwpb.js → cli-m446pz53.js}

@@ -2,7 +2,7 @@ import {
   config,
   ensureValidToken,
   getPensarApiUrl
-} from "./cli-m45bmsc5.js";
+} from "./cli-s0szpfg0.js";
 
 // src/core/api/issues.ts
 async function getAuthHeaders() {

package/build/{cli-nhqvhgdk.js → cli-pcwh8avj.js}

@@ -14,31 +14,31 @@ import {
   updateManifestEntryStatus,
   writeAgentManifest,
   writeExecutionMetrics
-} from "./cli-ww2x78tc.js";
+} from "./cli-m1368s8r.js";
 import {
   TargetedPentestAgent,
   buildPentestSystemPrompt
-} from "./cli-m69x66eh.js";
+} from "./cli-agnn8r68.js";
 import {
   EndpointSchema
 } from "./cli-0fy9j5dw.js";
 import {
   BlackboxAttackSurfaceAgent
-} from "./cli-x1g2s9n9.js";
+} from "./cli-5htwcgkj.js";
 import {
   createThreatModelPrompt
 } from "./cli-fw5r7pfj.js";
 import {
   CodeAgent
-} from "./cli-6w784800.js";
+} from "./cli-7sfmck9y.js";
 import {
   FindingsRegistry,
   OffensiveSecurityAgent,
   PLAN_MODE_TOOL_NAMES
-} from "./cli-e06s4dbt.js";
+} from "./cli-eppqn21m.js";
 import {
   hasToolCall
-} from "./cli-2gz62eh7.js";
+} from "./cli-dask2vk7.js";
 import {
   exports_external1 as exports_external,
   init_zod

package/build/{cli-fhm4gfky.js → cli-q4k54esg.js}

@@ -1,6 +1,6 @@
 import {
   generateObjectResponse
-} from "./cli-2gz62eh7.js";
+} from "./cli-dask2vk7.js";
 import {
   exports_external1 as exports_external,
   init_zod,

package/build/{cli-m45bmsc5.js → cli-s0szpfg0.js}

@@ -2,7 +2,7 @@ import {
   get,
   init,
   update
-} from "./cli-j54wb0q5.js";
+} from "./cli-gddjk082.js";
 
 // src/core/api/constants.ts
 var PENSAR_API_BASE_URL = "https://api.pensar.dev";

package/build/cli.js

@@ -6,15 +6,15 @@ import {
 import"./cli-3y0dgy56.js";
 import {
   init_toolset
-} from "./cli-2gz62eh7.js";
+} from "./cli-dask2vk7.js";
 import"./cli-0ghkg3w6.js";
-import"./cli-3462esbc.js";
-import"./cli-m45bmsc5.js";
+import"./cli-b24ad6fn.js";
+import"./cli-s0szpfg0.js";
 import"./cli-gpnb45ck.js";
-import"./cli-j54wb0q5.js";
+import"./cli-gddjk082.js";
 import {
   package_default
-} from "./cli-4bvafx3k.js";
+} from "./cli-k98mffkk.js";
 import {
   init_models
 } from "./cli-03z6pswp.js";
@@ -25,7 +25,7 @@ import {
 // package.json
 var package_default2 = {
   name: "@pensar/apex",
-  version: "1.6.0",
+  version: "1.7.0-canary.fc156bd3",
   description: "AI-powered penetration testing CLI tool with terminal UI",
   module: "src/tui/index.tsx",
   main: "build/cli.js",
@@ -500,7 +500,7 @@ async function resolveCliModel() {
   const explicit = getArg("--model");
   if (explicit)
     return explicit;
-  const { config: appConfig } = await import("./index-rm3jf64j.js");
+  const { config: appConfig } = await import("./index-gt67cyzx.js");
   const { getDefaultModelForConfig } = await import("./utils-jf52rmrb.js");
   const pensarConfig = await appConfig.get();
   const defaultModel = getDefaultModelForConfig(pensarConfig);
@@ -539,6 +539,7 @@ Usage:
 
 operator options (-p):
   -p, --prompt <text|@file>  (required) Prompt for the operator agent
+  -s, --system <text|@file>  Override the default system prompt
   --target <url>             Target URL / domain / IP
   --model <model>            AI model (default: auto-selected from configured provider)
 
@@ -572,9 +573,9 @@ Global options:
 async function runPentest() {
   const { config: config2 } = await import("./main-3d7dfdvs.js").then((m)=>__toESM(m.default,1));
   config2();
-  const { runPentestAgent } = await import("./blackboxPentest-x1eynyy6.js");
-  const { sessions } = await import("./index-g60tmaw4.js");
-  const { config: appConfig } = await import("./index-rm3jf64j.js");
+  const { runPentestAgent } = await import("./blackboxPentest-skcta0kn.js");
+  const { sessions } = await import("./index-07t9k8kz.js");
+  const { config: appConfig } = await import("./index-gt67cyzx.js");
   const target = getArgRequired("--target");
   const cwd = getArg("--cwd");
   const mode = getArg("--mode");
@@ -638,9 +639,9 @@ Report:    ${reportPath}` : ""}`);
 async function runTargetedPentest() {
   const { config: config2 } = await import("./main-3d7dfdvs.js").then((m)=>__toESM(m.default,1));
   config2();
-  const { runTargetedPentestAgent } = await import("./targetedPentest-ydr77zs4.js");
-  const { sessions } = await import("./index-g60tmaw4.js");
-  const { config: appConfig } = await import("./index-rm3jf64j.js");
+  const { runTargetedPentestAgent } = await import("./targetedPentest-ey7qf86y.js");
+  const { sessions } = await import("./index-07t9k8kz.js");
+  const { config: appConfig } = await import("./index-gt67cyzx.js");
   const target = getArgRequired("--target");
   const objectives = getAllArgs("--objective");
   const pensarConfig = await appConfig.get();
@@ -688,8 +689,8 @@ POCs:      ${pocsPath}`);
 async function runThreatModel() {
   const { config: config2 } = await import("./main-3d7dfdvs.js").then((m)=>__toESM(m.default,1));
   config2();
-  const { runThreatModelWorkflow } = await import("./threatModel-vkn59yef.js");
-  const { config: appConfig } = await import("./index-rm3jf64j.js");
+  const { runThreatModelWorkflow } = await import("./threatModel-hk9513tc.js");
+  const { config: appConfig } = await import("./index-gt67cyzx.js");
   const path = await import("path");
   const pensarConfig = await appConfig.get();
   const model = await resolveCliModel();
@@ -725,10 +726,10 @@ Threat model written to: ${resolvedPath}`);
 async function runOperator() {
   const { config: config2 } = await import("./main-3d7dfdvs.js").then((m)=>__toESM(m.default,1));
   config2();
-  const { runOffensiveSecurityAgent } = await import("./offesecAgent-e8t65rte.js");
-  const { sessions, normalizeMessages, getResumeMessages } = await import("./index-g60tmaw4.js");
-  const { ALL_TOOL_NAMES, SKILL_TOOL_NAMES } = await import("./index-wr87h0sz.js");
-  const { config: appConfig } = await import("./index-rm3jf64j.js");
+  const { runOffensiveSecurityAgent } = await import("./offesecAgent-epxgzhrt.js");
+  const { sessions, normalizeMessages, getResumeMessages } = await import("./index-07t9k8kz.js");
+  const { ALL_TOOL_NAMES, SKILL_TOOL_NAMES } = await import("./index-r2r7pe6x.js");
+  const { config: appConfig } = await import("./index-gt67cyzx.js");
   const { createInterface } = await import("readline");
   const { readFileSync: readFileSync2, existsSync } = await import("fs");
   const path = await import("path");
@@ -739,6 +740,8 @@ async function runOperator() {
     process.exit(1);
   }
   const prompt = resolveFlagValue(promptRaw);
+  const systemRaw = getArg("-s") ?? getArg("--system");
+  const systemPrompt = systemRaw ? resolveFlagValue(systemRaw) : undefined;
   const target = getArg("--target");
   const pensarConfig = await appConfig.get();
   const model = await resolveCliModel();
@@ -783,6 +786,7 @@ ${sep}
     for (;; ) {
       await runOffensiveSecurityAgent({
         prompt: currentPrompt,
+        ...systemPrompt ? { system: systemPrompt } : {},
         model,
         target,
         activeTools: [...ALL_TOOL_NAMES, ...SKILL_TOOL_NAMES],
@@ -837,25 +841,25 @@ if (hasFlag("-p") || command === "--prompt") {
   await runTargetedPentest();
 } else if (command === "login" || command === "auth") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./auth-hhzeb7wq.js");
+  await import("./auth-15hfam2s.js");
 } else if (command === "uninstall") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./uninstall-b3kzz704.js");
+  await import("./uninstall-dgfcyn2t.js");
 } else if (command === "projects") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./projects-w5yxp27m.js");
+  await import("./projects-w09vs70m.js");
 } else if (command === "pentests") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./pentests-3zp7z952.js");
+  await import("./pentests-j8k5gzk9.js");
 } else if (command === "issues") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./issues-mrcf758f.js");
+  await import("./issues-4w6bj06d.js");
 } else if (command === "fixes") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./fixes-d38fdj5s.js");
+  await import("./fixes-5sk3s2ss.js");
 } else if (command === "logs") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./logs-pece65p3.js");
+  await import("./logs-4b4ybecs.js");
 } else if (command === "threat-model") {
   await runThreatModel();
 } else if (command === "doctor") {
@@ -867,7 +871,7 @@ if (hasFlag("-p") || command === "--prompt") {
     console.error("All other commands work with Node \u2014 run 'pensar --help'.");
     process.exit(1);
   }
-  await import("./index-hcxak3dc.js");
+  await import("./index-kbrnaz9a.js");
 } else {
   console.error(`Error: Unknown command '${command}'`);
   console.error();

package/build/{fixes-d38fdj5s.js → fixes-5sk3s2ss.js}

@@ -2,10 +2,10 @@
 import {
   getFix,
   listFixes
-} from "./cli-ys0ahwpb.js";
-import"./cli-m45bmsc5.js";
-import"./cli-j54wb0q5.js";
-import"./cli-4bvafx3k.js";
+} from "./cli-m446pz53.js";
+import"./cli-s0szpfg0.js";
+import"./cli-gddjk082.js";
+import"./cli-k98mffkk.js";
 import"./cli-8rxa073f.js";
 
 // src/cli/fixes.ts

package/build/{index-g60tmaw4.js → index-07t9k8kz.js}

@@ -13,24 +13,24 @@ import {
   update,
   write,
   writeRaw
-} from "./cli-fhm4gfky.js";
+} from "./cli-q4k54esg.js";
 import {
   ToolsetStateSchema,
   exports_toolset,
   init_toolset,
   toggleTool
-} from "./cli-2gz62eh7.js";
+} from "./cli-dask2vk7.js";
 import {
   init_zod,
   zod_default
 } from "./cli-0ghkg3w6.js";
-import"./cli-3462esbc.js";
-import"./cli-m45bmsc5.js";
+import"./cli-b24ad6fn.js";
+import"./cli-s0szpfg0.js";
 import"./cli-gpnb45ck.js";
-import"./cli-j54wb0q5.js";
+import"./cli-gddjk082.js";
 import {
   getCurrentVersion
-} from "./cli-4bvafx3k.js";
+} from "./cli-k98mffkk.js";
 import"./cli-03z6pswp.js";
 import {
   __require,

package/build/{index-0je5jws9.js → index-3jzgn22s.js}

@@ -9,15 +9,15 @@ import {
   signGatewayRequest,
   startDeviceFlow,
   validateGateway
-} from "./cli-3462esbc.js";
+} from "./cli-b24ad6fn.js";
 import {
   ensureValidToken,
   fetchWorkOSClientId,
   isTokenExpired,
   refreshAccessToken
-} from "./cli-m45bmsc5.js";
-import"./cli-j54wb0q5.js";
-import"./cli-4bvafx3k.js";
+} from "./cli-s0szpfg0.js";
+import"./cli-gddjk082.js";
+import"./cli-k98mffkk.js";
 import"./cli-8rxa073f.js";
 export {
   validateGateway,

package/build/{index-rm3jf64j.js → index-gt67cyzx.js}

@@ -2,8 +2,8 @@ import {
   get,
   init,
   update
-} from "./cli-j54wb0q5.js";
-import"./cli-4bvafx3k.js";
+} from "./cli-gddjk082.js";
+import"./cli-k98mffkk.js";
 import"./cli-8rxa073f.js";
 
 // src/core/config/index.ts

package/build/{index-hcxak3dc.js → index-kbrnaz9a.js}

@@ -3,14 +3,14 @@ import {
   buildThreatModelPrompt,
   createSkillsRegistry,
   runOffensiveSecurityAgent
-} from "./cli-2aj6efy7.js";
+} from "./cli-7ay2tay9.js";
 import {
   REPORT_FILENAME_MD,
   convertModelMessagesToUI,
   loadSubagents,
   readExecutionMetrics,
   writeExecutionMetrics
-} from "./cli-ww2x78tc.js";
+} from "./cli-m1368s8r.js";
 import {
   createThreatModelPrompt
 } from "./cli-fw5r7pfj.js";
@@ -38,14 +38,14 @@ import {
   planFilePath,
   readPlan,
   sessions
-} from "./cli-e06s4dbt.js";
+} from "./cli-eppqn21m.js";
 import {
   detectOSAndEnhancePrompt
 } from "./cli-tp1tqn3k.js";
 import {
   read,
   write
-} from "./cli-fhm4gfky.js";
+} from "./cli-q4k54esg.js";
 import {
   getAutoPopulatedHosts,
   getAutoPopulatedPorts,
@@ -57,7 +57,7 @@ import {
   init_toolset,
   modelSupportsThinking,
   stepCountIs
-} from "./cli-2gz62eh7.js";
+} from "./cli-dask2vk7.js";
 import"./cli-0ghkg3w6.js";
 import {
   disconnect,
@@ -69,19 +69,19 @@ import {
   selectWorkspace,
   startDeviceFlow,
   validateGateway
-} from "./cli-3462esbc.js";
+} from "./cli-b24ad6fn.js";
 import {
   config,
   getPensarApiUrl,
   getPensarConsoleUrl
-} from "./cli-m45bmsc5.js";
+} from "./cli-s0szpfg0.js";
 import"./cli-gpnb45ck.js";
 import {
   update
-} from "./cli-j54wb0q5.js";
+} from "./cli-gddjk082.js";
 import {
   checkForUpdate
-} from "./cli-4bvafx3k.js";
+} from "./cli-k98mffkk.js";
 import {
   AVAILABLE_MODELS,
   init_models
@@ -69360,7 +69360,7 @@ function AppContent({
       toast(`Update available: v${currentVersion} → v${latestVersion}. Run: pensar upgrade`, "warn", 8000);
     });
     const checkAuthToken = async () => {
-      const { isTokenExpired, isConnected: isConnected2 } = await import("./index-0je5jws9.js");
+      const { isTokenExpired, isConnected: isConnected2 } = await import("./index-3jzgn22s.js");
       if (isConnected2(config2.data) && config2.data.accessToken && isTokenExpired(config2.data.accessToken, 60) && !config2.data.refreshToken && !config2.data.pensarAPIKey) {
         toast("Your Pensar Console session has expired. Run /login to refresh.", "warn", 8000);
       }

package/build/{index-wr87h0sz.js → index-r2r7pe6x.js}

@@ -7,17 +7,17 @@ import {
   SKILL_TOOL_NAMES,
   StepTraceWriter,
   createAllTools
-} from "./cli-e06s4dbt.js";
+} from "./cli-eppqn21m.js";
 import"./cli-tp1tqn3k.js";
-import"./cli-fhm4gfky.js";
+import"./cli-q4k54esg.js";
 import"./cli-3y0dgy56.js";
-import"./cli-2gz62eh7.js";
+import"./cli-dask2vk7.js";
 import"./cli-0ghkg3w6.js";
-import"./cli-3462esbc.js";
-import"./cli-m45bmsc5.js";
+import"./cli-b24ad6fn.js";
+import"./cli-s0szpfg0.js";
 import"./cli-gpnb45ck.js";
-import"./cli-j54wb0q5.js";
-import"./cli-4bvafx3k.js";
+import"./cli-gddjk082.js";
+import"./cli-k98mffkk.js";
 import"./cli-03z6pswp.js";
 import"./cli-8rxa073f.js";
 export {

package/build/{issues-mrcf758f.js → issues-4w6bj06d.js}

@@ -3,10 +3,10 @@ import {
   getIssue,
   listIssues,
   updateIssue
-} from "./cli-ys0ahwpb.js";
-import"./cli-m45bmsc5.js";
-import"./cli-j54wb0q5.js";
-import"./cli-4bvafx3k.js";
+} from "./cli-m446pz53.js";
+import"./cli-s0szpfg0.js";
+import"./cli-gddjk082.js";
+import"./cli-k98mffkk.js";
 import"./cli-8rxa073f.js";
 
 // src/cli/issues.ts

package/build/{logs-pece65p3.js → logs-4b4ybecs.js}

@@ -2,10 +2,10 @@
 import {
   listAgentLogs,
   searchAgentLogs
-} from "./cli-ys0ahwpb.js";
-import"./cli-m45bmsc5.js";
-import"./cli-j54wb0q5.js";
-import"./cli-4bvafx3k.js";
+} from "./cli-m446pz53.js";
+import"./cli-s0szpfg0.js";
+import"./cli-gddjk082.js";
+import"./cli-k98mffkk.js";
 import"./cli-8rxa073f.js";
 
 // src/cli/logs.ts

package/build/{offesecAgent-e8t65rte.js → offesecAgent-epxgzhrt.js}

@@ -1,16 +1,16 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-e06s4dbt.js";
+} from "./cli-eppqn21m.js";
 import"./cli-tp1tqn3k.js";
-import"./cli-fhm4gfky.js";
+import"./cli-q4k54esg.js";
 import"./cli-3y0dgy56.js";
-import"./cli-2gz62eh7.js";
+import"./cli-dask2vk7.js";
 import"./cli-0ghkg3w6.js";
-import"./cli-3462esbc.js";
-import"./cli-m45bmsc5.js";
+import"./cli-b24ad6fn.js";
+import"./cli-s0szpfg0.js";
 import"./cli-gpnb45ck.js";
-import"./cli-j54wb0q5.js";
-import"./cli-4bvafx3k.js";
+import"./cli-gddjk082.js";
+import"./cli-k98mffkk.js";
 import"./cli-03z6pswp.js";
 import"./cli-8rxa073f.js";
 

package/build/{pentest-gtn28jcf.js → pentest-r9k07h8z.js}

@@ -2,24 +2,24 @@ import {
   DEFAULT_CONCURRENCY,
   runPentestSwarm,
   runPentestWorkflow
-} from "./cli-nhqvhgdk.js";
-import"./cli-ww2x78tc.js";
-import"./cli-m69x66eh.js";
+} from "./cli-pcwh8avj.js";
+import"./cli-m1368s8r.js";
+import"./cli-agnn8r68.js";
 import"./cli-0fy9j5dw.js";
-import"./cli-x1g2s9n9.js";
+import"./cli-5htwcgkj.js";
 import"./cli-fw5r7pfj.js";
-import"./cli-6w784800.js";
-import"./cli-e06s4dbt.js";
+import"./cli-7sfmck9y.js";
+import"./cli-eppqn21m.js";
 import"./cli-tp1tqn3k.js";
-import"./cli-fhm4gfky.js";
+import"./cli-q4k54esg.js";
 import"./cli-3y0dgy56.js";
-import"./cli-2gz62eh7.js";
+import"./cli-dask2vk7.js";
 import"./cli-0ghkg3w6.js";
-import"./cli-3462esbc.js";
-import"./cli-m45bmsc5.js";
+import"./cli-b24ad6fn.js";
+import"./cli-s0szpfg0.js";
 import"./cli-gpnb45ck.js";
-import"./cli-j54wb0q5.js";
-import"./cli-4bvafx3k.js";
+import"./cli-gddjk082.js";
+import"./cli-k98mffkk.js";
 import"./cli-03z6pswp.js";
 import"./cli-8rxa073f.js";
 export {

package/build/{pentests-3zp7z952.js → pentests-j8k5gzk9.js}

@@ -3,10 +3,10 @@ import {
   dispatchPentest,
   getScan,
   listScans
-} from "./cli-ys0ahwpb.js";
-import"./cli-m45bmsc5.js";
-import"./cli-j54wb0q5.js";
-import"./cli-4bvafx3k.js";
+} from "./cli-m446pz53.js";
+import"./cli-s0szpfg0.js";
+import"./cli-gddjk082.js";
+import"./cli-k98mffkk.js";
 import"./cli-8rxa073f.js";
 
 // src/cli/pentests.ts

package/build/{projects-w5yxp27m.js → projects-w09vs70m.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env bun
 import {
   listProjects
-} from "./cli-ys0ahwpb.js";
-import"./cli-m45bmsc5.js";
-import"./cli-j54wb0q5.js";
-import"./cli-4bvafx3k.js";
+} from "./cli-m446pz53.js";
+import"./cli-s0szpfg0.js";
+import"./cli-gddjk082.js";
+import"./cli-k98mffkk.js";
 import"./cli-8rxa073f.js";
 
 // src/cli/projects.ts

package/build/{targetedPentest-ydr77zs4.js → targetedPentest-ey7qf86y.js}

@@ -1,17 +1,17 @@
 import {
   TargetedPentestAgent
-} from "./cli-m69x66eh.js";
-import"./cli-e06s4dbt.js";
+} from "./cli-agnn8r68.js";
+import"./cli-eppqn21m.js";
 import"./cli-tp1tqn3k.js";
-import"./cli-fhm4gfky.js";
+import"./cli-q4k54esg.js";
 import"./cli-3y0dgy56.js";
-import"./cli-2gz62eh7.js";
+import"./cli-dask2vk7.js";
 import"./cli-0ghkg3w6.js";
-import"./cli-3462esbc.js";
-import"./cli-m45bmsc5.js";
+import"./cli-b24ad6fn.js";
+import"./cli-s0szpfg0.js";
 import"./cli-gpnb45ck.js";
-import"./cli-j54wb0q5.js";
-import"./cli-4bvafx3k.js";
+import"./cli-gddjk082.js";
+import"./cli-k98mffkk.js";
 import"./cli-03z6pswp.js";
 import"./cli-8rxa073f.js";
 

package/build/{threatModel-vkn59yef.js → threatModel-hk9513tc.js}

@@ -2,26 +2,26 @@ import {
   buildThreatModelPrompt,
   createSkillsRegistry,
   runOffensiveSecurityAgent
-} from "./cli-2aj6efy7.js";
+} from "./cli-7ay2tay9.js";
 import {
   ALL_TOOL_NAMES,
   ASK_USER_QUESTIONS_TOOL_NAME,
   SKILL_TOOL_NAMES,
   buildBaseSystemPrompt,
   sessions
-} from "./cli-e06s4dbt.js";
+} from "./cli-eppqn21m.js";
 import"./cli-tp1tqn3k.js";
-import"./cli-fhm4gfky.js";
+import"./cli-q4k54esg.js";
 import"./cli-3y0dgy56.js";
 import {
   stepCountIs
-} from "./cli-2gz62eh7.js";
+} from "./cli-dask2vk7.js";
 import"./cli-0ghkg3w6.js";
-import"./cli-3462esbc.js";
-import"./cli-m45bmsc5.js";
+import"./cli-b24ad6fn.js";
+import"./cli-s0szpfg0.js";
 import"./cli-gpnb45ck.js";
-import"./cli-j54wb0q5.js";
-import"./cli-4bvafx3k.js";
+import"./cli-gddjk082.js";
+import"./cli-k98mffkk.js";
 import"./cli-03z6pswp.js";
 import"./cli-8rxa073f.js";
 

package/build/{uninstall-b3kzz704.js → uninstall-dgfcyn2t.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env bun
 import {
   detectInstallMethod
-} from "./cli-4bvafx3k.js";
+} from "./cli-k98mffkk.js";
 import {
   __require
 } from "./cli-8rxa073f.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pensar/apex",
-  "version": "1.6.0",
+  "version": "1.7.0-canary.fc156bd3",
   "description": "AI-powered penetration testing CLI tool with terminal UI",
   "module": "src/tui/index.tsx",
   "main": "build/cli.js",

package/build/agent-xyps79pq.js

@@ -1,19 +0,0 @@
-import {
-  CodeAgent
-} from "./cli-6w784800.js";
-import"./cli-e06s4dbt.js";
-import"./cli-tp1tqn3k.js";
-import"./cli-fhm4gfky.js";
-import"./cli-3y0dgy56.js";
-import"./cli-2gz62eh7.js";
-import"./cli-0ghkg3w6.js";
-import"./cli-3462esbc.js";
-import"./cli-m45bmsc5.js";
-import"./cli-gpnb45ck.js";
-import"./cli-j54wb0q5.js";
-import"./cli-4bvafx3k.js";
-import"./cli-03z6pswp.js";
-import"./cli-8rxa073f.js";
-export {
-  CodeAgent
-};